Symantec’s AI- assisted tools to keep cyber threats at bay
AI innovations to automate capabilities of Symantec’s investigations team to zero in on most pressing threats
Symantec has announced that the powerful threat detection technology used by its own research teams to uncover some of the most notable cyber attacks in history are now available to its Advanced Threat Protection ( ATP) customers. The Symantec Targeted Attack Analytics ( TAA) technology enables ATP customers to leverage advanced machine learning to automate the discovery of targeted attacks – the most dangerous intrusions in corporate networks.
Targeted attacks represent one of the most dangerous threats to enterprise security today. Yet they are often hidden from view under a mountain of alerts generated by security systems, giving attackers time to gain access to systems and seize valuable data. TAA removes this distraction by identifying truly targeted activity and prioritising it in the form of a highly reliable incident report for the security team.
TAA is the result of an internal jointeffort between Symantec’s Attack Investigation Team, responsible for uncovering Stuxnet, Regin, Lazarus as well as links to SWIFT and WannaCry attacks among others, and a team of Symantec’s top security data scientists on the leading edge of machine learning research. Unlike traditional solutions, TAA takes the process, knowledge and capabilities of the world’s leading security experts and turns it into artificial intelligence, providing companies with elite “virtual analysts,” to allow security experts to devote their limited time and resources to the most critical attacks, instead of spending time sifting through false positives.
The TAA technology implements machine learning to analyse a broad range of data, including system and network telemetry from Symantec’s global customer base which forms one of the largest threat data lakes in the world. Symantec’s cloudbased approach to this technology also enables the frequent retraining and updating of analytics to adapt to new attack methods without the need for product updates. This new approach provides ATP customers with automated targeted threat detection, identifying sophisticated attacks where other solutions may fail.
TAA is now available as part of Symantec’s Integrated Cyber Defense Platform for Symantec Advanced Threat Protection ( ATP) customers.